---
title: "Create an MFA TOTP token that proves TOTP code checking has passed as a specific time for posture checks."
method: POST
path: "/current-api-session/totp-token"
tags: ["Current API Session", "MFA"]
---

# Create an MFA TOTP token that proves TOTP code checking has passed as a specific time for posture checks.

`POST /current-api-session/totp-token`

Creates a TOTP token that proves TOTP validation occurred at a specific time. Used in posture response for posture checks.

## Request body

- MfaCode
  - `code` string, required

## Response `200`

A TOTP token create response, contains a token used to satisfy posture checks

- TotpTokenEnvelope
  - `data` TotpToken, required
    - `issuedAt` string, date-time, required
    - `token` string, required
  - `meta` Meta, required
    - `apiEnrollmentVersion` string
    - `apiVersion` string
    - `filterableFields` string[]
    - `pagination` Pagination
      - `limit` number, required
      - `offset` number, required
      - `totalCount` number, required

## Other responses

- `401` — The supplied session does not have the correct access rights to request this resource
- `404` — The requested resource does not exist

---

[API](https://skmtc.net/openziti/apis/ziti-edge-client.md) · [All operations](https://skmtc.net/openziti/apis/ziti-edge-client/llms.txt) · [OpenAPI document](https://skmtc-service-staging.skmtc.workers.dev/v1/apis/openziti/ziti-edge-client/versions/25da9a73a095/schema)